MalwarePublished
Uncovering a SectopRAT Variant Embedded in Legitimate Software
Source AlienVault OTX General
0
Description
SectopRAT (also known as ArechClient2) is a .NET-based remote access trojan (RAT) that provides a range of functions through multiple control commands. These include collecting sensitive data from the victim’s device, capturing screens, remotely managing processes and files, controlling bots, and other forms of remote device management.
Indicators of compromise
Domains 8
- bsc-dataseed1.ninicoin.io
- bsc-dataseed4.ninicoin.io
- bsc-dataseed3.defibit.io
- bsc-dataseed4.defibit.io
- bsc-dataseed3.ninicoin.io
- bsc-dataseed2.ninicoin.io
- bsc-dataseed2.defibit.io
- bsc-dataseed1.defibit.io
URLs 10
- http://98.142.252.140:15847
- http://98.142.252.140:9000/wmglb
- https://bsc-dataseed1.defibit.io/
- https://bsc-dataseed1.ninicoin.io/
- https://bsc-dataseed2.defibit.io/
- https://bsc-dataseed2.ninicoin.io/
- https://bsc-dataseed3.defibit.io/
- https://bsc-dataseed3.ninicoin.io/
- https://bsc-dataseed4.defibit.io/
- https://bsc-dataseed4.ninicoin.io/
Hashes 5
Community reviews
Loading reviews…